Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based...

41
Regulator’s Dialogue Recent Developments in Supervision of Anti-Money Laundering and Counter-Financing of Terrorism AML and Financial Crime Risk Division Enforcement and AML Department Hong Kong Monetary Authority 7 June 2018

Transcript of Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based...

Page 1: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Regulator’s Dialogue Recent Developments in Supervision of

Anti-Money Laundering and Counter-Financing of Terrorism

AML and Financial Crime Risk Division

Enforcement and AML Department

Hong Kong Monetary Authority

7 June 2018

Page 2: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Disclaimer

The presentation is provided for training purposes and does

not form part of the formal legal and regulatory requirements

of the HKMA. It should not be substituted for seeking

detailed advice on any specific case from an AI’s own

professional adviser.

The HKMA and HKIB are the co-owners of the copyright and

any other rights in the PowerPoint materials of this

presentation. These materials may be used for personal

viewing purposes or for use within an AI. Such materials

may not be reproduced for or distributed to third parties, or

used for commercial purposes, without prior written consents

of the HKMA and HKIB.

2

Page 3: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Agenda

Using Hong Kong’s ML/TF risk assessment in the risk-based

approach

Strengthening information & intelligence sharing

Effectiveness in manging sanctions risks

Harnessing the potential of technology in AML/CFT work

The FATF Mutual Evaluation of Hong Kong – implications for

the banking sector

3

Page 4: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Agenda

Using Hong Kong’s ML/TF risk assessment in the risk-based

approach

Strengthening information & intelligence sharing

Effectiveness in manging sanctions risks

Harnessing the potential of technology in AML/CFT work

The FATF Mutual Evaluation of Hong Kong – implications for

the banking sector

4

Page 6: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Hong Kong’s AML/CFT Policy

The Government is committed to upholding a robust AML/CFT regime

that:

a) Fulfills the international AML/CFT standards;

b) Deters and detects illicit fund flows;

c) Combats ML/TF and restrains and confiscates illicit proceeds

effectively;

d) Reduces ML/TF vulnerabilities in Hong Kong;

e) Adopts a risk-based approach (RBA) in applying compliance

obligations to businesses and individuals;

f) Fosters strong external and international collaboration to disrupt

global ML/TF threats; and

g) Promotes awareness and builds capacity of private sector

stakeholders in combatting ML/TF risks.

6

Page 7: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Enhancing the AML/CFT Regime

Five major areas of work:

a) Enhancing AML/CFT legal framework to address gaps in legislation;

b) Strengthening risk-based supervision to ensure targeted regulation

of riskier areas;

c) Sustaining outreach and capacity-building to promote awareness

and understanding of ML/TF risks;

d) Monitoring new and emerging risks; and

e) Strengthening law enforcement efforts and intelligence capability to

tackle domestic and international ML/TF, and enhance restraint and

confiscation of the proceeds of crime.

7

Page 8: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Relevance for AIs (1)

8

Vulnerability level, threat level and overall ML risks of financial sectors

Source: Figure 5.1 of Hong Kong Money Laundering and Terrorist Financing Risk Assessment Report

Page 9: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Key results for the banking sector

Main threats

Fraud, tax evasion, corruption, sanctions evasion

Threats arise from domestic and, to a greater extent, external

activities

Vulnerabilities

ML/TF vulnerabilities exist in various segments and banking

products / services

Private banking, trade finance, international funds transfer

and retail and corporate banking

9

Relevance for AIs (2)

Page 10: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Major Predicate Offences

10

Breakdown of 1,621 identified predicate offences associated with 1,908

ML cases in 2011 - 2015

Source: Figure 4.1 of Hong Kong Money Laundering and Terrorist Financing Risk Assessment Report

Page 11: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

FATF Recommendation 1 – Assessing

Risks & Applying a Risk-based Approach

11

Identify,

assess and

understand

ML/TF risks

Formulate

better

targeted

response to

ML/TF risks

Apply an

RBA in

developing

AML/CFT

policies

Page 12: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Expectations

Institutional Risk Assessment (IRA)

No assumption of “replicating the Risk Assessment results” in

conducting AIs’ own IRA:

– a “high” ML risk level for the banking sector does not mean each

AI’s IRA result must also be “high”

AIs should take into account the main threats and vulnerable

areas of business identified in the Risk Assessment

AIs should study the Risk Assessment Report carefully,

consider relevant insights and implications, review and update

IRA according to your business model

12

Page 13: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Areas of Further Work

13

Sanctions

compliance

Reduce

compliance

burden

Public –

private

partnership

Innovation

and use of

technology

Regulatory

cooperation

Strengthening

ML/TF risk

understanding

Risk-

Based

Approach

Page 14: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Agenda

Using Hong Kong’s ML/TF risk assessment in the risk-based

approach

Strengthening information & intelligence sharing

Effectiveness in manging sanctions risks

Harnessing the potential of technology in AML/CFT work

The FATF Mutual Evaluation of Hong Kong – implications for

the banking sector

14

Page 15: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Hong Kong’s AML/CFT Policy

15

A major area of work to enhance Hong Kong’s AML/CFT

regime:

Strengthening law enforcement efforts and intelligence

capability to tackle domestic and international ML/TF,

and enhance restraint and confiscation of the proceeds

of crime, including through multi-agency cooperation/

partnership

Page 16: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Information & Intelligence Sharing

HKMA working together with Joint Financial Intelligence

Unit (JFIU), Hong Kong Police Force (HKPF) and

banking sector in two work streams

– Strengthening public-private information and intelligence sharing

on serious financial crimes and ML/TF activities

Circular on “Strengthening Information and Intelligence

Sharing” issued on 10 May 2018

16

Page 17: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Suspicious Transaction Reports

(STRs)

17

The growing number of STRs

Source: Figure 3.3 of Hong Kong Money Laundering and Terrorist Financing Risk Assessment Report

Page 18: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Suspicious Transaction Reports

(STRs)

Revised “Guidance Paper on Transaction Screening,

Transaction Monitoring and STR Reporting” [May 2018]

– Take into account recent experience and, in particular, analysis

and comments from JFIU

– AIs expected to conduct gap analysis and effect necessary

process changes

– Objective should be consistent, systematic approach

– Proactive in enhancing STR reporting

18

Page 19: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Fraud and Money Laundering

Intelligence Taskforce (FMLIT)

A public-private partnership for sharing information on cases

and typologies

Assists in the detection, prevention and disruption of crime in

a more targeted way

– Greater collective understanding of risks

– More informed, risk-based decision making in allocating private

sector AML/CFT resources

Industry support for FMLIT essential to its success

19

Page 20: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Agenda

Using Hong Kong’s ML/TF risk assessment in the risk-based

approach

Strengthening information & intelligence sharing

Effectiveness in manging sanctions risks

Harnessing the potential of technology in AML/CFT work

The FATF Mutual Evaluation of Hong Kong – implications for

the banking sector

20

Page 21: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Overview

Geopolitical developments

Increasing complexity of sanctions

HK vulnerable to abuse as conduit for illicit funds

21

Page 22: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Recent Initiatives

“Anti-Money Laundering / Counter-Terrorist Financing: United

Nations Sanctions” – Jan 2018

“FATF Guidance on Counter-Proliferation Financing”; and

discussion with stakeholders – March 2018

“Feedback from Thematic Reviews of AIs’ Sanctions

Screening Systems”; providing industry guidance after

thematic reviews – April 2018

22

Page 23: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Thematic Review - Background

Review of automated sanction screening systems

– Assistance from Regtech firm

Conducted on selected AIs

Assessing the effectiveness and efficiency of

screening systems

23

Page 24: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Testing Process – Key Aims

Effectiveness

Whether systems generate alerts on un-manipulated names

Whether “fuzzy matching” rules are effective at matching

manipulated names

Efficiency

Whether false positive levels are within operable levels

Comparison with industry standards

Whether system performance is in line with AI’s expectations

and how it fares compared to its peers

24

Page 25: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Expectations: Senior Management

Consider risk of sanctions breaches, determine

appropriate level of sanctions screening to manage risk

– Proven methodology for determining system settings and

performance

– Justifying deviations from group-wide policies

Role of Management Information

25

Page 26: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Expectations: Testing on New

Systems / Upgrades

26

AIs are required to demonstrate thorough testing and

tuning before system deployment and upgrades

Documentation of testing and analysis

Page 27: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Expectations: Frequent Ongoing

Monitoring, Testing & Tuning

27

Adequate understanding of obligations under HK and

other overseas sanctions regimes (as applicable)

Ongoing testing on system effectiveness and efficiency

Page 28: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Expectations: Adequate Skills &

Knowledge

28

Clear and demonstrable understanding of system filters

employed in the institution’s screening technology

Clarity around ownership and accountability of risk

Monitoring of suppression / good guy / white lists

Page 29: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Expectations: Achieving System

Effectiveness & Efficiency

29

Understanding relationship between effectiveness and

efficiency

– e.g. Monitoring levels of false positives while maintaining

accuracy

Demonstrating reasoning for rules or threshold changes

implemented to deal with levels of false alerts

Page 30: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Concluding Remarks

30

Significant legal and reputational risk of operating

ineffective sanctions screening systems

Cost of inefficient screening systems should not be

underestimated

The objective of this exercise is to provide AIs with the

right information needed to optimize system

performance

Regular system testing is vital for AIs

Page 31: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Agenda

Using Hong Kong’s ML/TF risk assessment in the risk-based

approach

Strengthening information & intelligence sharing

Effectiveness in manging sanctions risks

Harnessing the potential of technology in AML/CFT work

The FATF Mutual Evaluation of Hong Kong – implications for

the banking sector

31

Page 32: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Use of New Technologies

New technologies have created opportunities for

criminal activity

The same technologies, when used for good, have

huge potential to detect and disrupt crime

– Machine learning

– Artificial intelligence

– Robotics

32

Page 33: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Regulatory Thinking

Risk-based / technology-neutral approach to supervision

Objective is to ensure adequate protection for sector

integrity and for customers while retaining appropriate

flexibility so as not to hinder the development of Fintech

– No fixed way of doing things, open minded – interested in what

works and is effective

– Ability to maintain close contact with the industry and other

stakeholders to understand latest developments

33

Page 34: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Regulatory Engagement

Collaboration – with internal, external partners and with

the technology sector is important

HKMA’s response:

– Fintech Supervisory Chatroom

– Banking Made Easy initiative

– Greater flexibility under amended AMLO

– FMLIT

34

Page 35: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Response must recognize the increasingly proactive

role of AIs

– The nature of that role has also changed as crime increasingly

moves “online”

Threat in ML/TF risk assessment:

– Cybercrime threats, together with rapid advances in financial

services technology, which have created new avenues for ML

Efficiency and the willingness to innovate

– How can we get better at achieving the desired outcome?

Encouraging Innovation

35

Page 36: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Agenda

Using Hong Kong’s ML/TF risk assessment in the risk-based

approach

Strengthening information & intelligence sharing

Effectiveness in manging sanctions risks

Harnessing the potential of technology in AML/CFT work

The FATF Mutual Evaluation of Hong Kong – implications for

the banking sector

36

Page 37: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Hong Kong’s Mutual Evaluation (ME)

Assess technical compliance with the FATF Standards

and level of effectiveness of AML/CFT systems

H2/2018 to H1/2019 (last ME 2007 – 2008)

Work with Government and other agencies in

preparation including

– published Hong Kong’s ML/TF Risk Assessment Report in April

– Update of information on technical compliance and

effectiveness

– Preparatory work for the on-site visit of the assessment team

37

Page 38: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Hong Kong’s ME – Banking Sector

Expected to be a major focus given the size and

importance in Hong Kong’s economy

HKMA continues to accord a high priority to AML/CFT

work

– Work closely with all relevant stakeholders, domestically and

internationally, to develop and provide responses that are agile

and adaptable

– Recognise innovation and making the best use of technology

– Ensure response always relates to effectiveness

38

Page 39: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Hong Kong’s ME – On-site Visit

October to November 2018

– Process has already started

Assessors will meet with representatives of banking

sector

– To assess the effectiveness and discuss risks

– Not an investigation nor an inspection of individual private

sector entities

– Briefings will be arranged for selected representatives

39

Page 40: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Immediate Outcome 4 – FIs and DNFBPs adequately

apply AML/CFT preventive measures commensurate with

their risks, and report suspicious transactions

How well do FIs and DNFBPs

– Understand their risks and obligations and apply mitigation

measures commensurate with these risks?

– Apply CDD and record keeping measures?

– Apply the enhanced or specific measures for (a) PEPs, (b)

correspondent banking, (c) new technologies, (d) wire transfers

rules, (e) targeted financial sanctions relating to TF and (f)

higher risk countries identified by the FATF?

40

Page 41: Regulator’s Dialogue · FATF Recommendation 1 – Assessing Risks & Applying a Risk-based Approach 11 Identify, assess and understand ML/TF risks Formulate better targeted response

Q&A

41